vpn on asa and nat

carl_townshend · ‎09-20-2007

Hi all, I am going to set up a vpn tunnel on my asa, my question is , do I need to use Nat on it ?

spremkumar · ‎09-20-2007

hi carl

you dont need to use nat here. if you are concerned about the data confidentiality ipsec tunnel will be able to take care of with enough encryption strength configured on the tunnel end point devices.

regds

carl_townshend · ‎09-20-2007

how come we dont need nat here ?

spremkumar · ‎09-20-2007

Ok ... do throw some clarity on the current setup you have in place and what you are tryind to do so.

regds

carl_townshend · ‎09-20-2007

Hi

Basically, I have a new cisco asa, I have a public ip address that im going to put the outside interface on, inside will be something like 192.168.1.0/24 I want to route this via a vpn to my head office, I am unsure why we dont need nat as its travelling across the internet. Is this because the tunnels end point is routable then once that has connected the traffic flows inside it and so doesnt need natting ?

carl_townshend · ‎09-27-2007

can anyone help on this ?